# This is a configuration for the sigul bridge.
#
[bridge]
# Nickname of the bridge's certificate in the NSS database specified below
bridge-cert-nickname: sign-bridge{{ env_suffix }}.{{datacenter}}.fedoraproject.org

# Maximum accepted total size of all RPM payloads stored on disk for one request
max-rpms-payload-size: 70737418240
# Port on which the bridge expects client connections
client-listen-port: 44334
# Port on which the bridge expects server connections
server-listen-port: 44333
# A Fedora account system group required for access to the signing server.  If
# empty, no Fedora account check is done.
required-fas-group:

[koji]
koji-instances: primary
koji-config-primary: /etc/koji-primary.conf
koji-config: /etc/koji-primary.conf

[daemon]
# The user to run as
unix-user: sigul
# The group to run as
unix-group: sigul

[nss]
# Path to a directory containing a NSS database
nss-dir: /var/lib/sigul
# Password for accessing the NSS database.  If not specified, the bridge will
# ask on startup
# Currently no password is used
nss-password:
# Minimum and maximum versions of TLS used
nss-min-tls: tls1.2
nss-max-tls: tls1.2
